Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft
File:                     e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft (raw, json)
Hash identifier:          aG2ijjFWsV7NlKXsMWFFMmg1xQfnmZaT4dJX1fn8Rpk=
Subject key identifier:   8F:DE:46:8F:97:00:27:EB:AB:55:AE:02:B8:90:D9:27:5C:BD:41:55
Authority key identifier: 7B:C7:BE:52:1D:17:A6:A5:92:CC:61:F7:91:4C:25:F1:69:57:CC:9C
Certificate issuer:       /CN=7bc7be521d17a6a592cc61f7914c25f16957cc9c
Certificate serial:       018F96BE09AA833A5A16ADA6B36E9AFAB50B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft
Manifest number:          013C
Signing time:             Mon 20 May 2024 16:03:07 +0000
Manifest this update:     Mon 20 May 2024 16:03:07 +0000
Manifest next update:     Tue 21 May 2024 16:03:07 +0000
Files and hashes:         1: e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl (hash: N4jF8eCUGWD6rpQgFU7w6OLISKi20wkpfAdetnQL4fw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:96:be:09:aa:83:3a:5a:16:ad:a6:b3:6e:9a:fa:b5:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bc7be521d17a6a592cc61f7914c25f16957cc9c
        Validity
            Not Before: May 20 16:03:07 2024 GMT
            Not After : May 21 16:03:07 2024 GMT
        Subject: CN=8fde468f970027ebab55ae02b890d9275cbd4155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:db:be:b1:7b:b3:ca:f6:19:41:c7:60:45:0b:
                    86:5f:a0:dd:b5:b1:de:aa:00:0d:19:fe:78:c5:11:
                    85:aa:3d:26:2a:4c:24:53:28:b9:d3:e0:96:17:54:
                    6f:e7:d8:ba:43:68:73:23:e3:3c:1b:5e:3a:27:ad:
                    66:ff:49:d2:ce:d7:14:31:df:d8:3a:66:cc:a9:e8:
                    6f:e5:3c:d3:cb:14:9e:91:f9:30:a2:56:8b:08:e1:
                    31:29:c5:86:f7:5d:c7:2a:af:31:b2:d2:ad:cc:3e:
                    8a:7f:a2:71:3e:85:a8:5d:95:1b:ce:f7:96:9a:bb:
                    55:01:92:7a:1b:9a:6a:bf:e1:45:76:cc:94:57:5b:
                    a9:5a:38:36:1e:73:e1:0b:ea:d6:28:e7:32:76:67:
                    fa:56:e2:98:87:61:55:d6:33:0c:db:61:bc:61:8e:
                    2d:aa:4b:f0:6b:7d:80:88:5e:10:85:df:64:82:74:
                    dc:7a:98:54:63:17:21:41:15:38:66:cd:7a:72:80:
                    87:df:b6:b6:83:47:5c:16:59:29:81:18:85:3f:df:
                    ae:a8:53:8b:3e:2e:10:bc:00:a7:b0:cf:3d:fd:6f:
                    a7:bd:c4:f1:bf:4e:e6:64:42:5d:85:d6:c5:37:6b:
                    cf:4e:c6:b6:92:bc:7b:65:27:56:9c:4e:cd:6a:0c:
                    c1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DE:46:8F:97:00:27:EB:AB:55:AE:02:B8:90:D9:27:5C:BD:41:55
            X509v3 Authority Key Identifier:
                keyid:7B:C7:BE:52:1D:17:A6:A5:92:CC:61:F7:91:4C:25:F1:69:57:CC:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:6b:65:12:a6:1d:15:af:71:6e:03:7f:47:63:81:f7:cf:92:
         2f:93:85:8e:39:d5:c7:6d:bc:52:88:8e:a5:1b:53:92:24:26:
         3e:7e:53:58:0f:37:f0:b0:b4:f4:10:57:56:63:79:cd:72:67:
         4a:6b:16:33:02:7a:07:ae:95:ae:58:20:e4:f7:b6:16:0b:15:
         12:ab:ea:26:7d:dc:aa:69:42:af:ff:46:cb:e3:e9:dd:96:ba:
         c9:5e:d9:24:8e:b7:94:b0:89:db:47:f8:10:0e:1e:98:5a:0d:
         64:44:51:e7:eb:99:79:1d:e2:5c:5e:8b:00:10:a5:a6:c2:73:
         af:55:53:ac:81:e1:d4:62:11:e1:34:3b:72:af:21:0c:cf:ca:
         20:af:eb:5b:e3:e1:3e:72:eb:ed:c0:08:be:ba:df:9e:f4:96:
         4b:7f:95:78:70:3a:b3:c4:9a:d5:5b:40:d3:61:1c:5b:91:98:
         7d:07:c5:65:cf:9c:e2:65:22:25:a0:8a:3a:0c:6f:02:e8:df:
         c6:71:18:27:bc:ca:79:d7:94:93:a5:08:bd:fc:48:ef:fa:82:
         8a:fd:1b:10:4d:5c:b6:0b:4a:de:16:34:ac:87:24:26:60:89:
         77:29:63:26:13:e7:2c:94:e7:d5:cd:63:00:78:46:92:8f:0e:
         13:48:33:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 18:17:32 2024 by rpki-client on console-ams.rpki-client.org